NIST FIPS Crypto Standards
The cluster discusses NIST and FIPS 140 standards for cryptographic modules, debates their trustworthiness due to perceived NSA influence, and their role in government compliance and procurement.
Activity Over Time
Top Contributors
Keywords
Sample Comments
Yes.NIST- https://news.ycombinator.com/item?id=38016900
NIST doesn't like non-NIST ciphers.
Why does this standard not fall under the purview of N.I.S.T.?
Who cares if it's NIST-approved? The NSA owns NIST entirely; if something is NIST approved it's probably a good reason to not use it.
I see you don't have FIPS 140-2 certification.
This information is well over a year oldhttps://www.schneier.com/blog/archives/2016/08/nist_is_no_lo...
Ah FIPS, the bastion of security standards.
Perhaps you could link to these NIST standards?
That is backwards. NIST FIPS, especially FIPS 140, are explicitly security standards for cryptographic modules. They exist to define and validate security requirements and to give agencies a security metric for procurement. Security is central to the standard even if buyers also use it for compliance and contracting.
It’s funny that you’re a proponent of NIST/FIPS approved crypto but also worry about NSA backdoors.